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1 . (Currently Amended) A method for authenticating operation of a 
transceiver with a control station within a wireless remote identification 
system, the method comprising: 

receiving transceiver configuration information including a network 
address and transceiver authentication credentials - o t \^ \ v 
transce - e 

receiving an authentication request from a control station within the 
remote identification system; 

, o \ applying authentication processing to request information 

w&wf* Juthe authentication request , the authentication processing being 
x i on 4ft-eewfretefHwfe use of the transceiver authentication 

credentials associated with the transceiver; t o produc e an auth e n fe a&QB 
response-- and 

transmitting the authentication response to the control station to 
allow the control station to determine if the transceiver is authorized to 
communicate within the remote identification system. 

2. (Original) The method of claim 1 wherein receiving transceiver 
configuration information including a network address and transceiver 
authentication credentials comprises: 

performing address assignment processing to receive the network 
address; 

receiving transceiver authentication credentials including receiving: 

i) a transceiver identification code uniquely assigned to the 
transceiver; and 
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ii) a transceiver instruction set containing a set of 
authentication values and corresponding authentication 
instructions. 

3. (Original) The method of claim 2 wherein receiving transceiver 
configuration information comprises: 

periodically receiving replacement transceiver authentication 
credentials to replace the transceiver authentication credentials formerly 
received by the transceiver. 

4. (Currently Amended) The method of claim 3 wherein the request 
information within the authentication request includes: 

i) an request authentication result; and 

ii) a request data value; 

wherein applying authentication processing to request information 
within the authentication request • i r >i*-m-\ >w«6k9n-*»?Ji» the 
transceiver authentication credentials to produce the an authentication 
response comprises: 

identifying an authentication instruction that matches the request 
authentication result; and 

applying the authentication instruction that matches the request 
authentication result to the request data value from the authentication 
request to produce the authentication response. 

5. (Original) The method of claim 4 wherein identifying an authentication 
instruction that matches the request authentication result comprises: 

applying an authentication function to authentication values in the 
set of authentication values within the transceiver authentication 
credentials to produce corresponding transceiver authentication results; 
and 
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for each transceiver authentication result produced, determining if 
the transceiver authentication result matches the request authentication 
result for that authentication value, and if the transceiver authentication 
result matches the request authentication result for that authentication 
value, performing the operation applying the authentication instruction to 
produce the authentication response. 

6. (Original) The method of claim 5 wherein the request authentication 
result is a hash value result produced from a hash function within the 
control station and wherein the authentication function is an equivalent 
hash function within the transceiver and wherein the request 
authentication result is calculated by the control station using the hash 
function on a copy of the authentication values in the set of authentication 
values within the transceiver authentication credentials that is 
programmed into the control station. 

7. (Currently Amended) The method of claim 5 wherein applying the 
authentication instruction that matches the request authentication result to 
the request data value from the authentication request to produce the 
authentication response comprises: 

applying the authentication instruction to the request data value 
N , o - *v »m wife the transceiver identification code to obtain 
the authentication response. 

8. (Original) The method of claim 1 comprising repeating receiving an 
authentication request, applying authentication processing and 
transmitting the authentication response until at least one of: 

i) an authentication acknowledgement is received from the control 
station indicating that the transceiver was successfully authenticated; and 
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ii) a number of repeated attempts to authenticate the transceiver 
each fail. 

9. (Original) The method of claim 8 comprising repeating the operations of 
receiving an authentication request, applying authentication processing 
and transmitting the authentication response and upon each repeated 
iteration of such operations, the authentication request specifies at least 
one of: 

i) a different request authentication result for use by the transceiver 
to select an authentication instruction; and 

ii) a different request data value for use by the transceiver during 
application of the selected authentication instruction. 

10. (Previously Presented) The method of claim 1 wherein the transceiver is 
an RFID (Radio Frequency Identification) transceiver and wherein the 
control station operates an RFID (Radio Frequency Identification) 
management application. 

1 1 . (Original) The method of claim 1 wherein receiving transceiver 
configuration information comprises: 

performing an automatic download operation to receive the 
transceiver authentication credentials during trusted time period of 
operation of the transceiver. 

12. (Original) The method of claim 4 wherein the identified authentication 
instruction is at least one of a roll forward and a roll back instruction and 
wherein the request data value indicates an amount by which to roll the 
instruction set and wherein applying the authentication instruction that 
matches the request authentication result to the request data value from 
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the authentication request to produce the authentication response 
comprises: 

shifting a relationship position of the authentication instruction 
relative to the transceiver authentication values in the authentication 
credentials by an amount specified by the request data value, such that 
each transceiver authentication value in the authentication credentials 
corresponds to a different authentication instruction than prior to shifting 
the relationship position of the authentication instruction. 

1 3. (Currently Amended) In a control station for management of transceivers, 
a method for authenticating operation of the transceiver with the control 
station within a wireless remote identification system, the method 
comprising: 

providing transceiver configuration information including a network 
address and transceiver authentication credentials to a transceiver; 

providing an authentication request from the control station within 
the remote identification system to the transceiver, the authentication 
request containing a request authentication result and a request data 
value; 

receiving an authentication response from the transceiver, the 
authentication response containing an authentication response answer to 
the authentication request " „ \ N v °* 

<y t-a 'aceiver obv v res * c omputationaj 
" " j § - \ Ls vnlue; and 

determining if the authentication response answer is valid by 
applying authentication processing to the authentication response answer 
within the authentication response in conjunction with the transceiver 
authentication credentials, and if the authentication response answer is 
valid, transmitting an authentication success message to the transceiver. 
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14. (Original) The method of claim 13 wherein providing an authentication 
request from the control station within the remote identification system to 
the transceiver, the authentication request containing a request 
authentication result and a request data value comprises: 

selecting a transceiver authentication value from the transceiver 
authentication credentials; and 

applying an authentication function to the transceiver authentication 
value to produce the request authentication result for use in the 
authentication request. 

15. (Original) The method of claim 14 wherein determining if the 
authentication response answer is valid comprises: 

applying an authentication instruction corresponding to the selected 
transceiver authentication value to the request data value in conjunction 
with a transceiver identification code of the transceiver to which the 
authentication request was provided in order to produce a control station 
response; and 

comparing the control station response to the authentication 
response answer within the authentication response to determine if they 
are equivalent, and if they are equivalent, indicating that the authentication 
response answer is valid. 

16. (Currently Amended) A transceiver comprising: 

a memory; 
a processor; 

a communications interface; 

an interconnection mechanism coupling the memory, the 
processor, and the communications interface, the memory encoded with 
an authentication process that when executed by the processor, causes 
the transceiver authenticate operation of the transceiver with a control 



U.S. Application No.: 10/786,529 Attorney Docket No.: SUN03-14(040486) 
-8- 

station within a wireless remote identification system by causing the 
transceiver to perform the operations of: 

receiving, via the communications interface, transceiver 
configuration information including a network address and transceiver 
authentication credentials, 

receiving, via the communications interface, an authentication 
request from a control station within the remote identification system; 

applying authentication processing to request information within the 
authentication request N \ \, f N 

G©f}jwR€fen--wil:h the transceiver authentication credentials^ 

producing • teffredu€8 an authentication response , , \ 
n}.Q^}MAl3^.&3Un!oL\B^MD '- and 

transmitting, via the communications interface, the authentication 
response to the control station to allow the control station to determine if 
the transceiver is authorized to communicate within the remote 
identification system. 

1 7. (Original) The transceiver of claim 1 6 wherein when the transceiver 
performs the operation of receiving transceiver configuration information 
including a network address and transceiver authentication credentials, 
the transceiver performs the operations of: 

performing address assignment processing to receive the network 
address; 

receiving transceiver authentication credentials including receiving: 

i) a transceiver identification code uniquely assigned to the 
transceiver; and 

ii) a transceiver instruction set containing a set of 
authentication values and corresponding authentication 
instructions. 
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18. (Original) The transceiver of claim 1 7 wherein when the transceiver 
performs the operation of receiving transceiver configuration information, 
the transceiver performs the operation of: 

periodically receiving replacement transceiver authentication 
credentials to replace the transceiver authentication credentials formerly 
received by the transceiver. 

1 9. (Original) The transceiver of claim 1 8 wherein the request information 
within the authentication request includes: 

i) an request authentication result; and 

ii) a request data value; 

wherein when the transceiver performs the operation of applying 
authentication processing to request information within the authentication 
request in conjunction with the transceiver authentication credentials to 
produce an authentication response, the transceiver performs the 
operations of: 

identifying an authentication instruction that matches the request 
authentication result; and 

applying the authentication instruction that matches the request 
authentication result to the request data value from the authentication 
request to produce the authentication response. 

20. (Original) The transceiver of claim 1 9 wherein when the transceiver 
performs the operation of identifying an authentication instruction that 
matches the request authentication result, the transceiver performs the 
operations of: 

applying an authentication function to authentication values in the 
set of authentication values within the transceiver authentication 
credentials to produce corresponding transceiver authentication results; 
and 
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for each transceiver authentication result produced, determining if 
the transceiver authentication result matches the request authentication 
result for that authentication value, and if the transceiver authentication 
result matches the request authentication result for that authentication 
value, performing the operation applying the authentication instruction to 
produce the authentication response. 

21 . (Original) The transceiver of claim 20 wherein the request authentication 
result is a hash value result produced from a hash function within the 
control station and wherein the authentication function is an equivalent 
hash function within the transceiver and wherein the request 
authentication result is calculated by the control station using the hash 
function on a copy of the authentication values in the set of authentication 
values within the transceiver authentication credentials that is 
programmed into the control station. 

22. (Original) The transceiver of claim 20 wherein when the transceiver 
performs the operation of applying the authentication instruction that 
matches the request authentication result to the request data value from 
the authentication request to produce the authentication response, the 
transceiver performs the operation of: 

applying the authentication instruction to the request data value in 
conjunction with the transceiver identification code to obtain the 
authentication response. 

23. (Original) The transceiver of claim 1 6 wherein the transceiver performs 
the operation of repeating receiving an authentication request, applying 
authentication processing and transmitting the authentication response 
until at least one of: 
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i) an authentication acknowledgement is received from the control 
station indicating that the transceiver was successfully authenticated; and 

ii) a number of repeated attempts to authenticate the transceiver 
each fail. 

24. (Original) The transceiver of claim 23 wherein the transceiver performs 
the operation of repeating the operations of receiving an authentication 
request, applying authentication processing and transmitting the 
authentication response and upon each repeated iteration of such 
operations, the authentication request specifies at least one of: 

i) a different request authentication result for use by the transceiver 
to select an authentication instruction; and 

ii) a different request data value for use by the transceiver during 
application of the selected authentication instruction. 

25. (Previously Presented) The transceiver of claim 1 6 wherein the 
transceiver is an RFID (Radio Frequency Identification) transceiver and 
wherein the control station operates an RFID (Radio Frequency 
Identification) management application. 

26. (Original) The transceiver of claim 16 wherein when the transceiver 
performs the operation of receiving transceiver configuration information, 
the transceiver performs the operation of: 

performing an automatic download operation to receive the 
transceiver authentication credentials during trusted time period of 
operation of the transceiver. 

27. (Original) The transceiver of claim 1 9 wherein the identified 
authentication instruction is at least one of a roll forward and a roll back 
instruction and wherein the request data value indicates an amount by 



U.S. Application No.: 10/786,529 Attorney Docket No.: SUN03-14(040486) 
-12- 

which to roll the instruction set and wherein when the transceiver performs 
the operation of applying the authentication instruction that matches the 
request authentication result to the request data value from the 
authentication request to produce the authentication response, the 
transceiver performs the operation of: 

shifting a relationship position of the authentication instruction 
relative to the transceiver authentication values in the authentication 
credentials by an amount specified by the request data value, such that 
each transceiver authentication value in the authentication credentials 
corresponds to a different authentication instruction than prior to shifting 
the relationship position of the authentication instruction. 

28. (Original) A control station comprising: 
a memory; 
a processor; 

a communications interface; 

an interconnection mechanism coupling the memory, the 
processor, and the communications interface, the memory encoded with 
an authentication process that when executed by the processor, causes 
the control station to authenticate operation of a transceiver with the 
control station within a wireless remote identification system by causing 
the control station to perform the operations of: 

providing, via the communications interface, transceiver 
configuration information including a network address and transceiver 
authentication credentials to a transceiver; 

providing, via the communications interface, an authentication 
request from the control station within the remote identification system to 
the transceiver, the authentication request containing a request 
authentication result and a request data value; 
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receiving, via the communications interface, an authentication 
response from the transceiver, the authentication response containing an 
authentication response answer to the authentication request; and 

determining if the authentication response answer is valid by 
applying authentication processing to the authentication response answer 
within the authentication response in conjunction with the transceiver 
authentication credentials, and if the authentication response answer is 
valid, transmitting, via the communications interface, an authentication 
success message to the transceiver. 

29. (Original) The control station of claim 28 wherein when the control 
station performs the operation of providing an authentication request from 
the control station within the remote identification system to the 
transceiver, the authentication request containing a request authentication 
result and a request data value, the control station performs the 
operations of: 

selecting a transceiver authentication value from the transceiver 
authentication credentials; and 

applying an authentication function to the transceiver authentication 
value to produce the request authentication result for use in the 
authentication request. 

30. (Original) The control station of claim 29 wherein when the control 
station performs the operation of determining if the authentication 
response answer is valid, the control station performs the operations of: 

applying an authentication instruction corresponding to the selected 
transceiver authentication value to the request data value in conjunction 
with a transceiver identification code of the transceiver to which the 
authentication request was provided in order to produce a control station 
response; and 
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comparing the control station response to the authentication 
response answer within the authentication response to determine if they 
are equivalent, and if they are equivalent, indicating that the authentication 
response answer is valid. 

31 . (Original) A computer program product having a computer-readable 
medium including computer program logic encoded thereon that, when 
performed in a transceiver having a coupling to a communications 
interface provides a method for authenticating the transceiver with a 
control station in a network by performing the operations of: 

receiving, via the communications interface, transceiver 
configuration information including a network address and transceiver 
authentication credentials, 

receiving, via the communications interface, an authentication 
request from a control station within the remote identification system; 

applying authentication processing to request information within the 
authentication request in conjunction with the transceiver authentication 
credentials to produce an authentication response; and 

transmitting, via the communications interface, the authentication 
response to the control station to allow the control station to determine if 
the transceiver is authorized to communicate within the remote 
identification system. 

32. (Original) A computer program product having a computer-readable 
medium including computer program logic encoded thereon that, when 
performed in a control station having a coupling to a communications 
interface provides a method for authenticating a transceiver with the 
control station by performing the operations of: 
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providing, via the communications interface, transceiver 
configuration information including a network address and transceiver 
authentication credentials to a transceiver; 

providing, via the communications interface, an authentication 
request from the control station within the remote identification system to 
the transceiver, the authentication request containing a request 
authentication result and a request data value; 

receiving, via the communications interface, an authentication 
response from the transceiver, the authentication response containing an 
authentication response answer to the authentication request; and 

determining if the authentication response answer is valid by 
applying authentication processing to the authentication response answer 
within the authentication response in conjunction with the transceiver 
authentication credentials, and if the authentication response answer is 
valid, transmitting, via the communications interface, an authentication 
success message to the transceiver. 

33. (Previously Presented) The method of claim 1 , wherein the transceiver 
authentication credentials includes at least one of a roll forward and a roll 
back instruction and wherein a request data value in the authentication 
request from the control station indicates an amount by which to roll an 
instruction set associated with the transceiver. 

34. (Previously Presented) The method of claim 1 further comprising: 

maintaining a set of authentication instructions and corresponding 
authentication values generated by the transceiver; 

matching an authentication value received in the authentication 
request from the control station to a respective corresponding 
authentication value in the set; 
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identifying a corresponding authentication instruction associated 
with the corresponding authentication value in the set; and 

applying the corresponding authentication instruction to a data 
value in the authentication request to produce the authentication 
response. 

35. (Previously Presented) The method of claim 1 further comprising: 

maintaining a set of authentication instructions and corresponding 
authentication values generated by the transceiver; and 

shifting a relationship position of the authentication instructions 
relative to the corresponding authentication values in the set by an amount 
specified by a data value in the authentication request such that, after 
shifting the relationship position, each corresponding authentication value 
in the set corresponds to a different authentication instruction than prior to 
shifting the relationship position of the authentication instruction. 

36. (Previously Presented) A method as in claim 1 , wherein receiving the 
transceiver authentication credentials includes: 

receiving a first alphanumeric value and a corresponding first 
instruction; 

receiving a second alphanumeric value and a corresponding 
second instruction; and 

maintaining the first alphanumeric value and the corresponding first 
instruction at the transceiver as a first value-instruction pair; 

maintaining the second alphanumeric value and the corresponding 
second instruction at the transceiver as a second value-instruction pair. 



37. 



(Previously Presented) A method as in claim 36 further comprising: 

applying the authentication processing at the transceiver to the first 
alphanumeric value to generate a first transceiver generated result 
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associated with the first alphanumeric value and the corresponding first 
instruction; 

applying the authentication processing at the transceiver to the 
second alphanumeric value to generate a second transceiver generated 
result associated with the second alphanumeric value and the 
corresponding second instruction; 

maintaining the first transceiver generated result along with the first 
value-instruction pair; and 

maintaining the second transceiver generated result along with the 
second value-instruction pair. 

38. (Previously Presented) A method as in claim 37, wherein applying 

authentication processing to request information within the authentication 
request includes: 

identifying an authentication value in the authentication request 
received from the control station; 

matching the authentication value in the authentication request to 
one of the first transceiver generated result and the second transceiver 
generated result; and 

if the authentication value in the authentication request received 
from the control station matches the first transceiver generated result, 
utilizing the corresponding first instruction to generate a response to the 
control station; and 

if the authentication value in the authentication request received 
from the control station matches the second transceiver generated result, 
utilizing the corresponding second instruction to generate a response to 
the control station. 
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39. (Previously Presented) A method as in claim 37, wherein applying 
authentication processing to request information within the authentication 
request includes: 

identifying an authentication value in the authentication request 
received from the control station; 

attempting to match the authentication value in the authentication 
request to one of the first transceiver generated result and the second 
transceiver generated result; and 

if the authentication value in the authentication request received 
from the control station does not match either of the first and second 
transceiver generated result, failing authentication of the transceiver. 

40. (Currently Amended) A method as in claim 1 , wherein applying 
authentication processing to request information within the authentication 
request based on jfv-GQRjy^Gt-iQB-wit-h the transceiver authentication 
credentials to produce an authentication response includes: 

based on information in the authentication request, identifying one 
of multiple authentication instructions maintained at the transceiver; and 

applying the identified one of multiple authentication instructions to 
i) a data value in the authentication request received from the control 
station and ii) an identification code associated with the transceiver to 
produce the authentication response. 



41 . (Previously Presented) The method as in claim 1 , wherein transmitting the 
authentication response to the control station enables the control station to 
identify whether the transceiver is authorized to communicate with remote 
tagged items with respect to the transceiver on communication paths other 
than through the control station, the method further comprising: 
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receiving an authentication success message from the control 
station indicating that the transceiver is able to communicate with the 
remote tagged items. 

42. (Currently Amended) A method as in claim 1 , wherein applying 
authentication processing to request information inwithin the 
authentication request , ^ " the transceiver 
authentication credentials o * ^ - includes: 

based on information in the authentication request, identifying one 
of multiple authentication instructions maintained at the transceiver; and 

applying the identified one of multiple authentication instructions to 
a data value in the authentication request received from the control station 
to produce the authentication response. 

43. (Previously Presented) A method as in claim 1 , wherein applying 
authentication processing to the request information includes: 

identifying an authentication instruction that matches a request 
authentication result received in the authentication request; and 

applying the authentication instruction that matches the request 
authentication result to a request data value in the authentication request 
to produce the authentication response. 

44. (Previously Presented) A method as in claim 43, wherein identifying the 
authentication instruction includes: 

applying an authentication instruction to authentication values in a 
set of authentication values in the transceiver authentication credentials to 
produce corresponding transceiver authentication results; and 

for each of the corresponding transceiver authentication results, 
determining if a respective transceiver authentication result matches the 
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request authentication result in the authentication result received in the 
authentication request; and 

when identifying a match between the corresponding transceiver 
authentication results and the respective transceiver authentication, 
utilizing the corresponding authentication function to apply to the request 
data value in the authentication request to produce the authentication 
response. 

45. (Previously Presented) The method as in claim 42, wherein transmitting 
the authentication response to the control station enables the control 
station to identify whether the transceiver is authorized to communicate 
with remote tagged items with respect to the transceiver on 
communication paths other than through the control station, the method 
further comprising: 

receiving an authentication success message from the control 
station indicating that the transceiver is able to communicate with the 
remote tagged items. 

46. (Currently Amended) A method as in claim 1 , wherein applying 
authentication processing to request information within the authentication 
request based on i n conjunotiG fHwfe the transceiver authentication 
credentials to produce the m authentication response includes: 

selecting an authentication instruction based on information in the 
authentication request; and 

applying the authentication instruction to a data value in the 
authentication request received from the control station to produce an 
authentication value for inclusion in the authentication response. 

47. (Previously Presented) A method as in claim 46, wherein selecting the 
authentication instruction based on information in the authentication 
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request includes obtaining the authentication instruction from multiple logic 
operation instructions stored in the transceiver depending on a respective 
value of the information in the authentication request; and 

wherein applying the authentication instructions to the data value 
includes applying a selected logical operation instructions to the data 
value in the authentication request to produce the authentication value 
included in the authentication response. 

48. (Previously Presented) A method as in claim 47, wherein transmitting the 
authentication response includes: 

transmitting the authentication response from the transceiver to the 
control station, the authentication response including the authentication 
value to enable the control station to identify whether the transceiver is 
authorized to communicate with remote tagged items with respect to the 
transceiver on communication paths other than through the control station. 

49. (Previously Presented) A method as in claim 1 , wherein transmitting the 
authentication response includes: 

transmitting the authentication response from the transceiver to the 
control station, the authentication response including the authentication 
value to enable the control station to identify whether the transceiver is 
authorized to communicate with remote tagged items with respect to the 
transceiver on communication paths other than through the control station. 

50. (New) A method as in claim 1 , wherein receiving the authentication 
request includes receiving a data value associated with the authentication 
request; and 

wherein producing the authentication response includes: i) applying 
a computational instruction to modify the data value, and ii) generating the 
authentication response to include the modified data value. 



U.S. Application No.: 10/786,529 Attorney Docket No.: SUN03-14(040486) 
-22- 



51 . (New) A method as in claim 1, wherein receiving the authentication 

request includes receiving a data value associated with the authentication 
request; and 

wherein producing the authentication response includes: 

selecting a given computational instruction of multiple 

computational instructions associated with the transceiver; 

computing an authentication response value by applying the 

given computational instruction to the data value associated with 

the authentication request; and 

generating the authentication response to include the 

authentication response value. 



52. (New) A method as in claim 1 , wherein receiving the authentication 

request includes receiving a first data value and a second data value from 
the control station; and 

wherein producing the authentication response includes: 

utilizing the first data value to identify an instruction of 
multiple instructions associated with the transceiver; 

computing an authentication response value by applying the 
identified instruction to the second data value; and 

generating the authentication response to include the 
authentication response value. 



53. (New) A method as in claim 1 further comprising: 

receiving a set of authentication values and corresponding 
instructions; 

applying a hash function associated with the transceiver to each of 
the authentication values in the set to create a mapping of hashed 
authentication values to the corresponding instructions; 
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wherein receiving the authentication request includes receiving a 
first data value and a second data value from the control station; and 
wherein producing the authentication response includes: 

comparing the first data value to the hashed authentication 
values in the mapping to identify a given instruction of multiple 
instructions associated with the transceiver; 

computing an authentication response value by applying the 
given instruction to the second data value; and 

generating the authentication response to include the 
authentication response value. 



